4 ms·

I'm tempted to write a competing article: "If you're using SSH in 2022, you're doing it wrong" There's no need to open port 22 if tools like AWS Session Manage

by cj 5y ago

I'm tempted to write a competing article: "If you're using SSH in 2022, you're doing it wrong" There's no need to open port 22 if tools like AWS Session Manager (and GCP's equivalent) are available to you.

core-utility 5y ago
Don't forget about the no-ops "If you're opening a shell on any server, you're doing it wrong (2022)" method.
- dtgriscom 5y ago
  What's next? "If you're using a computer, you're doing it wrong"?
  - kafkaIncarnate 5y ago
    "If you have data, code, or processor execution, you're doing it wrong."
    - jandrese 5y ago
      That's really not that far off from what some people think. "You should never touch your own data, that is what the cloud is for."
  - geodel 5y ago
    Now this is where I want to go! I mean using technology in 2022 feels so outdated. Don't we have cloud to do everything for us.
  - deleted 5y ago
    [deleted]
GekkePrutser 5y ago
But even if you do it through that, SSH is a much nicer protocol than typing on a remote console. You get file transfer, X, agent and port forwarding, terminal window scaling and much lower bandwidth. Also, not all servers are on cloud platforms.
- twic 5y ago
  Is it possible to run Zmodem over this AWS pseudo-console the way you can over SSH? Not all servers are on cloud platforms, but there are somewhat comparable ways to shunt a serial or out-of-band management console over the network.
  - GekkePrutser 5y ago
    Not sure, I haven't used AWS much. Most of the web consoles I have used are like VNC. So no, not really possible to run anything like Zmodem over. Not that I'd want to either, of course. Bringing an 1988 solution back to fix a conceptual 2022 problem does not sound like a great fix :) I understand that in some workload types you want to have full autodeployment on servers, using ansible, kerberos, whatever. In that case interactive login is never needed. But this is a very specific subset of 'servers' in my opinion. A lot of HN contributors work in this so this approach may work for them but it won't everywhere.
deleted 5y ago
[deleted]
onpensionsterm 5y ago
There are actually people working on things other than CRUD web apps!
throwaway984393 5y ago
I think you're being downvoted by the same nerds obsessed with self-hosting. "But how can I self-host without ssh?!"
martopix 5y ago
And can I access my university's server with that? My office computer from home?

by cj 5y ago

core-utility 5y ago

Don't forget about the no-ops "If you're opening a shell on any server, you're doing it wrong (2022)" method.

dtgriscom 5y ago
What's next? "If you're using a computer, you're doing it wrong"?
- kafkaIncarnate 5y ago
  "If you have data, code, or processor execution, you're doing it wrong."
  - jandrese 5y ago
    That's really not that far off from what some people think. "You should never touch your own data, that is what the cloud is for."
- geodel 5y ago
  Now this is where I want to go! I mean using technology in 2022 feels so outdated. Don't we have cloud to do everything for us.
- deleted 5y ago
  [deleted]

GekkePrutser 5y ago

But even if you do it through that, SSH is a much nicer protocol than typing on a remote console. You get file transfer, X, agent and port forwarding, terminal window scaling and much lower bandwidth. Also, not all servers are on cloud platforms.

twic 5y ago
Is it possible to run Zmodem over this AWS pseudo-console the way you can over SSH? Not all servers are on cloud platforms, but there are somewhat comparable ways to shunt a serial or out-of-band management console over the network.
- GekkePrutser 5y ago
  Not sure, I haven't used AWS much. Most of the web consoles I have used are like VNC. So no, not really possible to run anything like Zmodem over. Not that I'd want to either, of course. Bringing an 1988 solution back to fix a conceptual 2022 problem does not sound like a great fix :) I understand that in some workload types you want to have full autodeployment on servers, using ansible, kerberos, whatever. In that case interactive login is never needed. But this is a very specific subset of 'servers' in my opinion. A lot of HN contributors work in this so this approach may work for them but it won't everywhere.

deleted 5y ago

[deleted]

onpensionsterm 5y ago

There are actually people working on things other than CRUD web apps!

throwaway984393 5y ago

I think you're being downvoted by the same nerds obsessed with self-hosting. "But how can I self-host without ssh?!"

martopix 5y ago

And can I access my university's server with that? My office computer from home?